sbom-distribution

There are 1 repository under sbom-distribution topic.

• chainloop-dev / chainloop

  Chainloop is an Open Source evidence store for your Software Supply Chain attestations, SBOMs, VEX, SARIF, CSAF files, QA reports, and more.

  compliancecyclonedxdevsecopssbomsbom-distributionsecurityspdxsupply-chain-securitymetadata-platformsbom-discoverylicenseopen-source-licensingospooss-complianceregulated-industryattestationin-totoslsaslsa-provenance
  Language:Go 315
• cyclonedx-bom-repo-server

  CycloneDX / cyclonedx-bom-repo-server

  A BOM repository server for distributing CycloneDX BOMs

  bombill-of-materialssoftware-bill-of-materialssbomcyclonedxsbom-distributionsbom-repositoryowaspobommbomsaasbomvex
  Language:C# 71
• transparency-exchange-api

  CycloneDX / transparency-exchange-api

  A standard API specification for exchanging CycloneDX BOMs

  bombill-of-materialssbomsoftware-bill-of-materialscyclonedxowaspspecificationapi-specsbom-distribution
  28
• actions-sbom

  SecureStackCo / actions-sbom

  A GitHub Action that creates a SBOM from your application so you can meet compliance and security requirements. Add this to your dev, staging and prod steps and SecureStack will make sure that what you've just deployed is secure and meets your requirements, and has the SBOM to show it!

  automation-testingbill-of-materialsdeploymentdeployment-automationosbomsbom-distributionsbom-generatorsbom-repositorysbom-toolsecuritysecurity-auditsecurity-automation
  24

• interlynk-io / sbomex

  Find & pull public SBOMs

  gogolangsbomsbom-distributionsbom-examplessbom-repositorysbom-samplessbom-tool
  Language:Go 11

• codenotary / sbom.sh-container

  Dockerfile and scripts to build a container image that facilitates generating and uploading Software Bill of Materials (SBOM) to sbom.sh utilizing various open-source SBOM tools such as Trivy, Grype, and Syft.

  sbomsbom-distributionsbom-generator
  Language:Shell 2